Some firewalls when doing nat will alter the return address (need to make nat work)
but not recalculate the header checksum, (Sonic walls come to mind.), Linux will
proply delete any tcp/udp packet that fails its checksum at the kernel level, and send
an error to the app. If this is happening to you Asterisk should log some kind of error.



AstGrp wrote:


Update...

I did some more testing today.. And with the same setup but one box
behind a Linksys router and another box behind a Pix firewall.. The
linksys works with no problems... So it appears to be how the PIX is
handling NAT & SIP...  If any one has any thoughts on this , it would be
greatly appreciated.

And thank you James for the support you have given today.

Thanks,

gcc

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of AstGrp
Posted At: Friday, March 12, 2004 4:29 PM
Posted To: Asterisk User Group
Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call
Subject: RE: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call


Do I need to associate the outside interface of the PIX with the phone on the inside.. I don't remember doing this before...

Setup ----

* Server ---> PIX FW ---> WWW CLOUD ----> PIX FW ---> IP Phone

Again the only difference than before is the First PIX FW.... Old setup
was.... (Different server though)

* Server ----> Linksys Router ----> WWW CLOUD ----> PIX FW ----> IP
Phone

Any thoughts?

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of James
Sizemore Posted At: Friday, March 12, 2004 2:58 PM Posted To: Asterisk
User Group
Conversation: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call
Subject: Re: [Asterisk-Users] chan_sip.c:495 retrans_pkt: Maximum
retries exceeded on call


The pings are pinging the out side port on the nat device, You don't have a
rule in your nat table to associate it with a device on the inside. You


should
reset the phone and then see if the qualify shows a return time. You
will need to make the phone register every time you change you config
till the qualify shows a time. A good way to do this is to reboot the
phone. Your nat device will have a default time that it keep nat rules
in its table.
Your qualify time will need to be lower then this value.


AstGrp wrote:





_______________________________________________
Asterisk-Users mailing list
[EMAIL PROTECTED]
http://lists.digium.com/mailman/listinfo/asterisk-users
To UNSUBSCRIBE or update options visit:
  http://lists.digium.com/mailman/listinfo/asterisk-users

Reply via email to